Let us take example of secp256k1 curve. The current known public key with most leading zero (in x cordinate) is:
pubKey = (0x00000000000000000000003b78ce563f89a0ed9414f5aa28ad0d96d6795f9c63,
0x3f3979bf72ae8202983dc989aec7f2ff2ed91bdd69ce02fc0700ca100e59ddf3)
private = 0x7fffffffffffffffffffffffffffffff5d576e7357a4501ddfe92f46681b20a1 (half of order)
My question is whether is it possible to have pubKeys with leading zeros? For example:
private = 0x7ADD48F07237A85230BE8FE44E1F7E36FEAF649672AEEFAA0F5ABBAD1721A994
pubKey = (0x00006fcf15e8d272d1a995af6fcc9d6c0c2f4c0b6b0525142e8af866dd8dad4b,
0xe6aca70f61450bb377bf212b8863f5aa2ff50675d3c72c1d84519f2b5b19e7fc)
OR to further explain my question, I know that the following publicKey is a valid pubKey for secp256k1:
pubKey = (0x00000351c77ba68ec21856ff85284e7ddd5a1b83d41fc6a1278c67ad9f2f5e7f,
0x09624c553c74b14cde21f80ab4a2cc4dc2cb314d40515b7445a9e1f31a873a7d)
Does there exist an efficient attack to calculate private key for given pubKey, by the fact, that pubKey has leading zeros?
